| View previous topic :: View next topic |
| Author |
Message |
ONEEYEMAN
Advocate
Joined: 01 Mar 2005
Posts: 3650
|
 Posted: Sat Mar 30, 2024 4:35 pm Post subject: [SOLVED]: wpa_supplicant do not support TKIP cipher anymore |
 |
|
H, ALL,
I updated my system, rebooted and now getting this:
| Code: |
invalid cipher: 'CCMP TKIP'
failed to parse paiwise 'CCMP TKIP'
invalid cipher: 'CCMP TKIP WEP104 WEP40'
failed to parse group 'CCMP TKIP WEP104 WEP40'
|
I checked the WiFi guide and the configuration file still references that.
Thank you
Last edited by ONEEYEMAN on Sat Mar 30, 2024 7:21 pm; edited 1 time in total |
|
| Back to top |
|
 |
NeddySeagoon
Administrator
Joined: 05 Jul 2003
Posts: 54577
Location: 56N 3W
|
| Posted: Sat Mar 30, 2024 4:50 pm Post subject: |
|
|
ONEEYEMAN,
It does if you ask nicely but the tkip cypher is broken and should not be used.
Switch your AP to use WPA2 or WPA3 instead.
If moving to WPA2/3 is not possible, rebuild wpa_supplicant with USE=tkip.
_________________
Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
| Back to top |
|
|
ONEEYEMAN
Advocate
Joined: 01 Mar 2005
Posts: 3650
|
| Posted: Sat Mar 30, 2024 5:29 pm Post subject: |
|
|
NeddySeagoon,
Can I try to remove it and try again?
My AP is using WPA2-PSK (AES). Just checked.
Thank you. |
|
| Back to top |
|
|
NeddySeagoon
Administrator
Joined: 05 Jul 2003
Posts: 54577
Location: 56N 3W
|
| Posted: Sat Mar 30, 2024 5:59 pm Post subject: |
|
|
ONEEYEMAN,
WPA2-PSK is fine.
WPA/WPA2 mixed mode on your AP is not.
_________________
Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
| Back to top |
|
|
ONEEYEMAN
Advocate
Joined: 01 Mar 2005
Posts: 3650
|
| Posted: Sat Mar 30, 2024 6:06 pm Post subject: |
|
|
NeddySeagoon,
So I can just remove TKIP from configuration file?
Thank you. |
|
| Back to top |
|
|
NeddySeagoon
Administrator
Joined: 05 Jul 2003
Posts: 54577
Location: 56N 3W
|
| Posted: Sat Mar 30, 2024 6:22 pm Post subject: |
|
|
ONEEYEMAN,
You need to specify some crypto in the configuration file.
If TKIP is in a section that you no longer use, remove the whole section.
You need something that says WPA2-PSK to work with your AP.
_________________
Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
| Back to top |
|
|
ONEEYEMAN
Advocate
Joined: 01 Mar 2005
Posts: 3650
|
| Posted: Sat Mar 30, 2024 6:56 pm Post subject: |
|
|
NeddySeagoon,
As written in here, this is what I have in my conf file;
| Code: |
# The below line not be changed otherwise wpa_supplicant refuses to work
ctrl_interface=/var/run/wpa_supplicant
# Ensure that only root can read the WPA configuration
ctrl_interface_group=0
# Let wpa_supplicant take care of scanning and AP selection
ap_scan=1
network = {
ssid="example"
proto=WPA
key_mgmt=WPA-PSK
pairwise=CCMP TKIP
group=CCMP TKIP WEP104 WEP40
psk=XXX
priority=2
}:
|
|
|
| Back to top |
|
|
NeddySeagoon
Administrator
Joined: 05 Jul 2003
Posts: 54577
Location: 56N 3W
|
| Posted: Sat Mar 30, 2024 7:04 pm Post subject: |
|
|
ONEEYEMAN,
Yes, remove both TKIP and the WEP104 WEP40,
WEP is even more broken than TKIP
_________________
Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
| Back to top |
|
|
ONEEYEMAN
Advocate
Joined: 01 Mar 2005
Posts: 3650
|
| Posted: Sat Mar 30, 2024 7:05 pm Post subject: |
|
|
NeddySeagoon,
Which means someone needs to fix that page... 
Thank you. |
|
| Back to top |
|
|
NeddySeagoon
Administrator
Joined: 05 Jul 2003
Posts: 54577
Location: 56N 3W
|
| Posted: Sat Mar 30, 2024 7:17 pm Post subject: |
|
|
ONEEYEMAN,
You can be that someone, its a wiki. :)
If you are shy, start a discussion topic on the discussion page.
See also
_________________
Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
| Back to top |
|
|
flexibeast
Guru
Joined: 04 Apr 2022
Posts: 449
Location: Naarm/Melbourne, Australia
|
| Posted: Sun Mar 31, 2024 8:06 am Post subject: |
|
|
| NeddySeagoon wrote: | You can be that someone, its a wiki.  |
It's a Handbook page, though, so it's protected; i don't know if ONEEYEMAN has the required privileges, but i certainly don't, so i've started a new topic on the discussion page. |
|
| Back to top |
|
|
|
Networking & Security
